CVE-2024-6299

Katalog CVE

CVSS 3.7 · Low EPSS 0,16%

Kerentanan Use of a Key Past its Expiration Date pada conduit. Skor CVSS 3.1 3.7 (Low) menurut NVD.

Deskripsi (NVD)

Lack of consideration of key expiry when validating signatures in Conduit, allowing an attacker which has compromised an expired key to forge requests as the remote server, as well as PDUs with timestamps past the expiry date

Rincian

Terbit di NVD

25 Juni 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.7 (Low), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-324: Use of a Key Past its Expiration Date

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 4,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://conduit.rs/changelog/#v0-8-0-2024-06-12 release notes
• https://gitlab.com/famedly/conduit/-/releases/v0.8.0 release notes